
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
spiderbrain
Advanced tools
A deterministic context layer for your repo, committed beside the code: blast radius, keystones, and an MCP server that gives agents answers with receipts. The one command; wraps @spiderbrain/read + @spiderbrain/create.
A committed understanding layer for your repo, and the one command to work with it. A repo
tells an AI agent what the code is; it never tells it what matters, what a change
reaches, or why anything was built the way it was. spiderbrain fixes that.
export SPIDERBRAIN_API_KEY=sb_live_... # https://spiderbrain.ai/dashboard?tab=keys
npx spiderbrain create
Writes a source-free .spiderbrain/ folder and an AGENTS.md block. Commit both.
When a repo has a .spiderbrain/ folder, any agent or developer can use it offline:
npx spiderbrain mcp --root . # an MCP server for Claude Code / Cursor
npx spiderbrain blast src/db.ts # what a change here reaches
npx spiderbrain impact # what your current git diff reaches
npx spiderbrain keystones # the load-bearing files
npx spiderbrain path a.ts b.ts # how one file reaches another
npx spiderbrain verify --allow-stale # folder untampered? (CI gate)
An MCP client's working directory is usually not your repository, so pass the repo explicitly with
--root <path>,--root=<path>, or theSPIDERBRAIN_ROOTenvironment variable. Without it the server serves the working directory and reports that no understanding layer was found, which is a wrong answer rather than an error.
Every command takes --json (exit codes: 0 ok, 1 failed, 2 usage, 3 no understanding).
No committed folder? The reader falls back to the public registry when the repo's
origin has an unofficial brain there.
spiderbrain is a thin dispatcher over two independently installable packages:
@spiderbrain/read — consume: reader,
CLI, MCP server. Zero dependencies.@spiderbrain/create — produce:
fetch your scored brain and write the understanding set.A CI job that only publishes understanding can depend on @spiderbrain/create alone; an MCP
config that only reads can point at @spiderbrain/read. spiderbrain is what you type when
you just want the thing.
MIT.
FAQs
A deterministic context layer for your repo, committed beside the code: blast radius, keystones, and an MCP server that gives agents answers with receipts. The one command; wraps @spiderbrain/read + @spiderbrain/create.
We found that spiderbrain demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.